echoangle

The claim is “if I generate a random number with equal distribution in a gigantic range and get a very tiny number, it’s more likely that there’s a mistake somewhere than that I just got this number randomly”.

Yeah I don’t really get this, the rumor “there is some exploitable vulnerability in php” can’t really be the problem, because that’s probably known to everyone already. The rumor only helps you exploit it if there’s some specific hint how the exploit works.

How would this work without having to totally prevent anonymity on the internet? As long as you can log in from a country that doesn’t care about cybercrime, how would you prevent people from hacking others? You’ll never punish a North Korean hacker

How did they get access to the script though? The output seems to be identical to the real PoC, so it looks like the same script.

Don't you think the style of video looks a bit unprofessional? It's like the next iPhone being presented by the Apple CEO but using a vTuber avatar with subway surfer gameplay in the background.

I don't think most people that use PHP use it because they love it and find it a great technical solution, it's mostly technical debt being maintained and the fact that PHP is available to host everywhere.

How do you handle file uploads then? Isn’t that handled by the same process writing the uploaded files to disk?

Also the weird metrics. Would any human ever implement a counter showing total views and currently viewing users?

And also this only worked once, but in the future other entities getting sued now know they can just ignore it.

You don’t need to use google fonts as a CDN, but I think a lot of people use google fonts to look for fonts they then download and self-host.

That’s an argument against Anthropic/OpenAI, not for Deepseek. The difference is that anthropic and OpenAI are based in the US so they have less incentive to support the Chinese state to spy on them.

Does anyone know how a bird can get injured like this? I’m assuming there aren’t a lot of predators in the cage, did it just get stuck somewhere and pull it off?

Even if you have a button you click that changes color when the result return, I can’t really believe it. 5ms isn’t a lot, even with a two way journey it means that the effect you’re looking for is delayed by a single frame of your display (assuming 60hz).

> just a quick edit right after posting—I never really see Cloudflare in use directly by the top sites. They do exist, but it’s pretty rare, and even if you don’t believe me, I can always tell when a site uses Cloudflare due to its phantom latencies.

Are you saying you can feel that a website is using cloudflare because they have 5ms elevated latency?

I think you meant air instead of water

I agree that it only applies to HA secrets but HA also has a web interface. Secret doesn’t mean only password

> why would a company not selling tokens start

Because they want to expand their business and make money?

Is “I won’t buy this car if you don’t give me a discount” a threat too?

Even sending out a request to a third party server without any input by the user or good reason (which I wouldn’t count this as) should be counted as a privacy violation because HIBP can now infer that network is running HA.

> Fundamentally, if you're giving an application your passwords, it is precisely so that the application can transmit those passwords, in full, to the relevant services.

This is about secrets in general. Those could just as well be used to encrypt local data or sign session cookies for the internal web page. And sending the secret to the service it is for is different than sending it (or at least a part of its hash) to another service the user might not trust.

What difference does it make? In my understanding, as soon as you sell Muse Spark as a service, your whole revenue counts, no matter where you get it from.

What do you mean? What example was there before?

Go to court and sue them? Like every other disagreement about money basically.

I don’t think the phrasing is perfectly clear that only the revenue specifically generated by offering the model as a service is counted.

Model serving could be part of the business. If AWS offers Muse Spark as a service but the revenue is only 100k, they would still fall under this rule in my interpretation because obviously they have a much higher revenue in total.

To me this means that this rule only applies if you offer the model as a service, and not if you fall under those exceptions, but as soon as your business offers it, all your revenue counts.

So you could sell your phone and then tell apple it was stolen and pressure the buyer to return it? Why would apple care if the phone is unlocked? And if the phone is locked, you can just use find my, what do you need apple for?

Where does it say that? The quoted rule talks about revenue of the licensee, without specifying that it needs to be about the model.

I think the exclave does the STT and only gives the text to the main system without giving it the actual audio.

They are liable to the consumer but they can get their money back from their supplier in turn. As long as you only sell stuff sold to you by someone reputable you can get money from, it should be mostly fine.